Trusted OPC UA toolkits for embedded and enterprise systems
Operational data makes or breaks industrial products.
Real OT transparency starts at the source: the devices, controllers, and systems running operations — and demand secure, efficient, standards-based OPC UA communications.
Home-grown OPC UA implementations and, one-off gateways, often lead to fragile integrations, security gaps, and rework, increasing costs, impact quality, and delay time-to-market.
The Matrikon Flex and eFlex SDKs deliver a consistent, production-ready OPC UA foundation across devices and gateways — built on authentic, standards-based UA with enterprise-grade security
Matrikon Flex and eFlex are built for OEMs shipping industrial products, not just developers building prototypes.
Used in: Experion, PHD, Matrikon Data Broker
Conformance-tested; deployed worldwide
Conformance-tested; deployed worldwide
Built for multi-year service
One architecture from MCU to multi-core
Matrikon support + OPC UA-aligned roadmap
A full-featured OPC UA client/server stack, production-ready at scale, with a clean, unified API and modular architecture.
Matrikon Flex implements OPC UA Data Access, History Access, and Alarms & Conditions, so you can read/write live values, browse a modeled address space, subscribe to changes and events, and query or append history without bolt-ons. One consistent UA surface from first tag to enterprise dashboard removes the need for parallel APIs, custom adapters, or retraining.
Stream OT data to modern stacks (plant to cloud) without code. Flex supports OPC UA Pub/Sub over MQTT/TCP and HTTPS, giving you standard paths into historians, data lakes, and analytics platforms. Use MQTT topics to publish/stream telemetry and state to IT services, and HTTPS for secure, firewall-friendly request/response exchanges.
With validated hooks for WolfMQTT + WolfSSL, you can stand up TLS-secured MQTT quickly without workarounds or vendor-locked SDKs.
Flex integrates certificate-based authentication, configurable security policies (ECC/RSA), and TLS integrations (e.g., OpenSSL, webTLS, WolfSSL), so identity and encryption are baked-in, not an afterthought. You can manage trust lists, certificate enrollment/rotation, and revocation centrally and enforce policies per site or system. Look forward to more predictable audit outcomes, faster approvals, and a repeatable security posture across fleets.
Built for 24/7 systems and real-world load, Matrikon Flex’s multi-threaded, multi-client runtime sustains heavy subscription loads, frequent reads/writes, and event traffic while keeping latency low. Concurrency controls and efficient queueing help maintain throughput under redundancy patterns. As CPU cores increase, the architecture targets near-linear gains, so the same stack grows with your workload instead of becoming a bottleneck.
Flex’s modular C++ design runs on Windows, Linux, and select RTOS, with clean APIs/callbacks that integrate into gateway and control environments, so you can deploy across common OSs and targets without re-architecting. Matrikon Flex is designed to accommodate your organization’s preferred crypto/XML libraries and IT tooling rather than forcing a single vendor stack.
Matrikon Flex implements OPC UA Data Access, History Access, and Alarms & Conditions, so you can read/write live values, browse a modeled address space, subscribe to changes and events, and query or append history without bolt-ons. One consistent UA surface from first tag to enterprise dashboard removes the need for parallel APIs, custom adapters, or retraining.
Stream OT data to modern stacks (plant to cloud) without code. Flex supports OPC UA Pub/Sub over MQTT/TCP and HTTPS, giving you standard paths into historians, data lakes, and analytics platforms. Use MQTT topics to publish/stream telemetry and state to IT services, and HTTPS for secure, firewall-friendly request/response exchanges.
With validated hooks for WolfMQTT + WolfSSL, you can stand up TLS-secured MQTT quickly without workarounds or vendor-locked SDKs.
Flex integrates certificate-based authentication, configurable security policies (ECC/RSA), and TLS integrations (e.g., OpenSSL, webTLS, WolfSSL), so identity and encryption are baked-in, not an afterthought. You can manage trust lists, certificate enrollment/rotation, and revocation centrally and enforce policies per site or system. Look forward to more predictable audit outcomes, faster approvals, and a repeatable security posture across fleets.
Built for 24/7 systems and real-world load, Matrikon Flex’s multi-threaded, multi-client runtime sustains heavy subscription loads, frequent reads/writes, and event traffic while keeping latency low. Concurrency controls and efficient queueing help maintain throughput under redundancy patterns. As CPU cores increase, the architecture targets near-linear gains, so the same stack grows with your workload instead of becoming a bottleneck.
Flex’s modular C++ design runs on Windows, Linux, and select RTOS, with clean APIs/callbacks that integrate into gateway and control environments, so you can deploy across common OSs and targets without re-architecting. Matrikon Flex is designed to accommodate your organization’s preferred crypto/XML libraries and IT tooling rather than forcing a single vendor stack.
Ideal for PLCs, controllers, gateways, and industrial software, Matrikon Flex replaces custom plumbing with a single stack that delivers real results:
Enterprise PKI/TLS and policy controls
Edge to multi-site on standard with MQTT/HTTPS
Reusable integrations across vendors/sites
One stack from on-prem to enterprise services.
Ultra-compact OPC UA connectivity for embedded, RTOS, and bare-metal devices, made for sensors, controllers, and compact gateways, where every byte of RAM counts.
Matrikon eFlex brings professional OPC UA to tiny devices without a heavyweight stack. Implementing OPC UA Data Access with a modeled address space browse/read/write, methods, and subscriptions/monitored items, eFlex delivers all the essentials. You get a clean, vendor-neutral data model that your ecosystem already understands, so small devices interoperate out of the box with gateways, SCADA, historians, and analytics.
Matrikon eFlex implements OPC UA Pub/Sub using UADP over UDP. The sessionless design reduces CPU overhead, while multicast allows a single publisher to distribute updates to many subscribers on the same network segment — delivering fast, predictable messaging with minimal overhead. This approach also positions devices for OPC UA FX / TSN timing integration through the BE. eTSN stack, which extends eFlex with deterministic scheduling and static TSN configuration — minimizing future redevelopment.
Matrikon eFlex supports certificate-based authentication, RSA, and Eliptical Curve Cryptography (ECC) (e.g., P-256) policy choices (such as Basic256Sha256), and provides interfaces for OpenSSL/WolfSSL with hooks to bring your own crypto if your platform requires it. You get certificate stores, provisioning/validation options, and policy control that match embedded realities, instead of forcing desktop-style security footprints.
Matrikon eFlex runs predictably on small controllers and real-time OS devices. It uses a simple, single-threaded loop (with an optional async mode) that keeps response times steady even when data traffic spikes. With typical “micro” builds using ~150+ KB of RAM, you can add secure OPC UA without reworking your memory layout or slowing your control cycle.
Matrikon eFlex uses a portable C++ core which can also be used in C-centric projects. With reference ports and examples for Embedded Linux, FreeRTOS ThreadX, and Windows, plus straightforward callbacks for time, memory, networking, and localization, eFlex helps reduce low level protocol coding so your software engineers can focus on product features — not stack work.
Matrikon eFlex is validated against OPC UA 1.04 (Micro Embedded + Data Access facets) and will be validated against OPC UA 1.05 in 2026, so behavior in your products is predictable in the certification and in actual deployments of your solutions. Matrikon eFlex is exercised against conformance profiles with real-world node sets, subscription patterns, and security policies. That means fewer surprises during formal reviews, smoother interoperability with other UA components, and a cleaner path as you evolve toward UA FX/TSN.
Matrikon products are developed under the IEC 62443-4-1 certified Secure Development Lifecycle of Honeywell Connected Enterprise.
For OEMs, this means your applications are built on an independently verified foundation for cybersecurity best practices, from design through maintenance. You gain inherited security assurance, faster compliance with IEC 62443-4-2 or system-level audits, and the confidence that every release of the SDK follows audited, secure-by-design processes.
Build once — with certified trust already built in
Matrikon eFlex brings professional OPC UA to tiny devices without a heavyweight stack. Implementing OPC UA Data Access with a modeled address space browse/read/write, methods, and subscriptions/monitored items, eFlex delivers all the essentials. You get a clean, vendor-neutral data model that your ecosystem already understands, so small devices interoperate out of the box with gateways, SCADA, historians, and analytics.
Matrikon eFlex implements OPC UA Pub/Sub using UADP over UDP. The sessionless design reduces CPU overhead, while multicast allows a single publisher to distribute updates to many subscribers on the same network segment — delivering fast, predictable messaging with minimal overhead. This approach also positions devices for OPC UA FX / TSN timing integration through the BE. eTSN stack, which extends eFlex with deterministic scheduling and static TSN configuration — minimizing future redevelopment.
Matrikon eFlex supports certificate-based authentication, RSA, and Eliptical Curve Cryptography (ECC) (e.g., P-256) policy choices (such as Basic256Sha256), and provides interfaces for OpenSSL/WolfSSL with hooks to bring your own crypto if your platform requires it. You get certificate stores, provisioning/validation options, and policy control that match embedded realities, instead of forcing desktop-style security footprints.
Matrikon eFlex runs predictably on small controllers and real-time OS devices. It uses a simple, single-threaded loop (with an optional async mode) that keeps response times steady even when data traffic spikes. With typical “micro” builds using ~150+ KB of RAM, you can add secure OPC UA without reworking your memory layout or slowing your control cycle.
Matrikon eFlex uses a portable C++ core which can also be used in C-centric projects. With reference ports and examples for Embedded Linux, FreeRTOS ThreadX, and Windows, plus straightforward callbacks for time, memory, networking, and localization, eFlex helps reduce low level protocol coding so your software engineers can focus on product features — not stack work.
Matrikon eFlex is validated against OPC UA 1.04 (Micro Embedded + Data Access facets) and will be validated against OPC UA 1.05 in 2026, so behavior in your products is predictable in the certification and in actual deployments of your solutions. Matrikon eFlex is exercised against conformance profiles with real-world node sets, subscription patterns, and security policies. That means fewer surprises during formal reviews, smoother interoperability with other UA components, and a cleaner path as you evolve toward UA FX/TSN.
Matrikon products are developed under the IEC 62443-4-1 certified Secure Development Lifecycle of Honeywell Connected Enterprise.
For OEMs, this means your applications are built on an independently verified foundation for cybersecurity best practices, from design through maintenance. You gain inherited security assurance, faster compliance with IEC 62443-4-2 or system-level audits, and the confidence that every release of the SDK follows audited, secure-by-design processes.
Build once — with certified trust already built in
Best for RTOS and bare-metal targets like sensors, controllers, and compact gateways, eFlex gives tiny devices a trusted OPC UA voice.
Sensors to platforms, one OPC UA approach.
Conformance-tested, field-proven core.
Pub/Sub and TSN today, UA FX tomorrow.
Tiny footprint and deterministic runtime.
Explore features, memory targets, OS support, and integration examples for Matrikon Flex and eFlex.